Description
Envoy is a cloud-native, open source edge and service proxy. There is a use-after-free in `HttpConnectionManager` (HCM) with `EnvoyQuicServerStream` that can crash Envoy. An attacker can exploit this vulnerability by sending a request without `FIN`, then a `RESET_STREAM` frame, and then after receiving the response, closing the connection.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
envoyproxy envoy
>= 1.30.0, <= 11.30.1affected>= 1.29.0, <= 1.29.4affected>= 1.28.0, <= 1.28.3affected<= 1.27.5affected